| | 104.21.80.1 | 302 Found | 964 B |
IP / ASN  104.21.80.1 #13335 CLOUDFLARENET Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-02 Times Seen5606109 Size964 B (964 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectgostream2.sbs FingerprintBE:01:DA:32:59:EF:79:A6:89:46:B3:A9:25:F4:26:C5:F9:44:1F:03 ValidityWed, 09 Jul 2025 01:58:44 GMT - Tue, 07 Oct 2025 02:54:58 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: gostream2.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Mon, 21 Jul 2025 17:49:59 GMT
content-type: text/html; charset=UTF-8
location: login.php
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
x-served-by: gostream2.sbs
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=W6TeOcKxbphuqFlKGCvovahlardQ5AT1rwWYbTuWszkc6L7ffoFSGC%2F0MuE%2Fjcydh%2Fy%2F2RSfr26iUGNvzS6Esmti%2F2RMrlzIloQ6"}]}
set-cookie: PHPSESSID=t9sngslrvvs9rl75qtfabv92aj; Path=/
cf-ray: 962c89c0edba5693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET gostream2.sbs/login.php | 104.21.80.1 | 200 OK | 964 B |
URL gostream2.sbs/login.php IP / ASN  104.21.80.1 #13335 CLOUDFLARENET Resource Info File typeHTML document, Unicode text, UTF-8 text First Seen2025-07-17 Last Seen2025-07-21 Times Seen2 Size964 B (964 bytes) MD5abedfad9893f0c1da7c6cc78526b426e SHA1bf2f58737059537398555ac51aedff7b50876e57 SHA256517114925cb683ab9d3e4ea25e67d9cba5398f8c62dbe1b03ae1b3331e040516 Certificate Info IssuerGoogle Trust Services Subjectgostream2.sbs FingerprintBE:01:DA:32:59:EF:79:A6:89:46:B3:A9:25:F4:26:C5:F9:44:1F:03 ValidityWed, 09 Jul 2025 01:58:44 GMT - Tue, 07 Oct 2025 02:54:58 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /login.php HTTP/1.1
Host: gostream2.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t9sngslrvvs9rl75qtfabv92aj
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Mon, 21 Jul 2025 17:50:00 GMT
content-type: text/html; charset=UTF-8
server: cloudflare
nel: {"report_to":"cf-nel","success_fraction":0.0,"max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
vary: Accept-Encoding
report-to: {"group":"cf-nel","max_age":604800,"endpoints":[{"url":"https://a.nel.cloudflare.com/report/v4?s=lG%2Fd6cAMrr6ZtZfJ51E4g7E6bW4jDdinEqcw5coN9W7RU0bu6aQiybIrC3ePgiY4xjPvqQCBJ59FTmnr4H0nQ1KwfcK0n9soGLTn"}]}
x-served-by: gostream2.sbs
content-encoding: br
cf-ray: 962c89c1df355693-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| GET gostream2.sbs/includes/login.css | 104.21.80.1 | 200 OK | 2.5 kB |
URL gostream2.sbs/includes/login.css IP / ASN  104.21.80.1 #13335 CLOUDFLARENET Requested byhttps://gostream2.sbs/login.php Resource Info File typeUnicode text, UTF-8 text First Seen2025-07-17 Last Seen2025-07-21 Times Seen2 Size2.5 kB (2525 bytes) MD53526588ead6f81ee4a4277cd8bd54fb5 SHA130964fcc6abb8e80b6a21f1ee8ef2538f651b668 SHA2562fec23bddadedff5b996af2b079a66334cca135e090d04f0df9e6344e3e02aa2 Certificate Info IssuerGoogle Trust Services Subjectgostream2.sbs FingerprintBE:01:DA:32:59:EF:79:A6:89:46:B3:A9:25:F4:26:C5:F9:44:1F:03 ValidityWed, 09 Jul 2025 01:58:44 GMT - Tue, 07 Oct 2025 02:54:58 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /includes/login.css HTTP/1.1
Host: gostream2.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gostream2.sbs/login.php
Cookie: PHPSESSID=t9sngslrvvs9rl75qtfabv92aj
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 21 Jul 2025 17:50:00 GMT
content-type: text/css
content-length: 945
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mm55yFyoBAPSsOkUKVUvAvM%2FW3tUVxbFU%2Brc50mOlWVJByikapiwFU2FOBu%2BTmux6Jfbz5nRwhGdZYgHYuLtwZEanq6wIiXOLoU%2BandZ3uyXFdLJwKoc5LV7zUpS4mMx"}],"group":"cf-nel","max_age":604800}
cf-cache-status: MISS
last-modified: Thu, 12 Dec 2024 04:44:23 GMT
etag: "9dd-6290b5e4197c0-gzip"
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
x-served-by: gostream2.sbs
cache-control: max-age=14400
cf-ray: 962c89c57d0e0b31-OSL
server: cloudflare
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3639&min_rtt=1057&rtt_var=2162&sent=83&recv=119&lost=0&retrans=0&sent_bytes=8934&recv_bytes=7253&delivery_rate=621331&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=18067&unsent_bytes=0&cid=222cfca5e1df1d75&ts=744&inflight_dur=35&x=40"
|
|
| GET gostream2.sbs/favicon.ico | 104.21.80.1 | 302 Found | 964 B |
URL gostream2.sbs/favicon.ico IP / ASN  104.21.80.1 #13335 CLOUDFLARENET Requested byhttps://gostream2.sbs/login.php Resource Info File typeN/A First Seen0001-01-01 Last Seen2025-08-02 Times Seen5606109 Size964 B (964 bytes) MD5d41d8cd98f00b204e9800998ecf8427e SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709 SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Certificate Info IssuerGoogle Trust Services Subjectgostream2.sbs FingerprintBE:01:DA:32:59:EF:79:A6:89:46:B3:A9:25:F4:26:C5:F9:44:1F:03 ValidityWed, 09 Jul 2025 01:58:44 GMT - Tue, 07 Oct 2025 02:54:58 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /favicon.ico HTTP/1.1
Host: gostream2.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://gostream2.sbs/login.php
Cookie: PHPSESSID=t9sngslrvvs9rl75qtfabv92aj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
date: Mon, 21 Jul 2025 17:50:00 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wMpuIX1%2B%2B6Ymejiu9UAWS7lsrrZpxm8G8pQB56s6QiX3khHCtqD8ouuc3XGh9Tzw5ffp6%2F%2Bom%2FufmzaRGAKuuCcYy9DM13ErT2b7mzf5ocMqkU8aJHgGr%2FSrY2tcJXD1"}],"group":"cf-nel","max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: BYPASS
location: login.php
x-served-by: gostream2.sbs
cf-ray: 962c89c64d210b31-OSL
server: cloudflare
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3432&min_rtt=1057&rtt_var=2036&sent=85&recv=120&lost=0&retrans=0&sent_bytes=10641&recv_bytes=7297&delivery_rate=686387&ss_exit_cwnd=0&ss_exit_reason=0&cwnd=19774&unsent_bytes=0&cid=222cfca5e1df1d75&ts=850&inflight_dur=37&x=40"
|
|
| GET gostream2.sbs/login.php | 104.21.80.1 | 200 OK | 964 B |
URL gostream2.sbs/login.php IP / ASN  104.21.80.1 #13335 CLOUDFLARENET Requested byhttps://gostream2.sbs/login.php Resource Info File typeHTML document, Unicode text, UTF-8 text First Seen2025-07-17 Last Seen2025-07-21 Times Seen2 Size964 B (964 bytes) MD5abedfad9893f0c1da7c6cc78526b426e SHA1bf2f58737059537398555ac51aedff7b50876e57 SHA256517114925cb683ab9d3e4ea25e67d9cba5398f8c62dbe1b03ae1b3331e040516 Certificate Info IssuerGoogle Trust Services Subjectgostream2.sbs FingerprintBE:01:DA:32:59:EF:79:A6:89:46:B3:A9:25:F4:26:C5:F9:44:1F:03 ValidityWed, 09 Jul 2025 01:58:44 GMT - Tue, 07 Oct 2025 02:54:58 GMT Analyzer | Verdict | Alert | Quad9 DNS | malicious | Sinkholed |
GET /login.php HTTP/1.1
Host: gostream2.sbs
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gostream2.sbs/login.php
DNT: 1
Connection: keep-alive
Cookie: PHPSESSID=t9sngslrvvs9rl75qtfabv92aj
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Mon, 21 Jul 2025 17:50:00 GMT
content-type: text/html; charset=UTF-8
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xhM3YYHa%2BRnMGY2FOyIfNWNXN2c75jLqxIobHxCeqRiKY4NJ3xeyNuINUkbUEtfB1eP2v9HHLKGIJO5KjgD6x42vWEuMqQY63NtZc9MsWzT75dEaTv1RHxPL2oY0S1uw"}],"group":"cf-nel","max_age":604800}
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate
pragma: no-cache
cf-cache-status: DYNAMIC
vary: Accept-Encoding
x-served-by: gostream2.sbs
content-encoding: br
cf-ray: 962c89c73d400b31-OSL
server: cloudflare
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=QUIC&rtt=3470&min_rtt=1057&rtt_var=1603&sent=87&recv=122&lost=0&retrans=0&sent_bytes=11401&recv_bytes=7653&delivery_rate=686387&ss_exit_cwnd=19774&ss_exit_reason=2&cwnd=14000&unsent_bytes=0&cid=222cfca5e1df1d75&ts=1004&inflight_dur=61&x=40"
|
|